The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-114222: Improper Authentication6.2 Medium6.9 Medium0%Oct 22, 2026
CVE-2026-114221: Insufficiently Protected Credentials7.4 High5.9 Medium0%Oct 22, 2026
CVE-2026-114220: Improper Certificate Validation9.1 Critical9.3 Critical0%Oct 22, 2026
CVE-2026-114219: Use of Hard-coded Credentials7.4 High9.1 Critical0%Oct 22, 2026
CVE-2026-114732: Authentication Bypass Using an Alternate Path or Channel6.8 MediumN/A0%Oct 22, 2026
CVE-2026-114731: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%Oct 22, 2026
CVE-2026-114730: Server-Side Request Forgery (SSRF)7.2 HighN/A0%Oct 22, 2026
CVE-2026-114729: Incomplete List of Disallowed Inputs5.3 MediumN/A0%Oct 22, 2026
CVE-2026-110354: Loop with Unreachable Exit Condition7.5 HighN/A1%Oct 22, 2026
CVE-2026-110353: Unchecked Return Value7.5 HighN/A1%Oct 22, 2026
CVE-2026-96398: Incorrect Authorization4.3 MediumN/A0%Oct 22, 2026
CVE-2026-96392: Improper Neutralization of Special Elements Used in a Template Engine3.5 LowN/A0%Oct 22, 2026
CVE-2026-96391: Missing AuthorizationN/AN/A0%Oct 22, 2026
CVE-2026-96390: Privilege Defined With Unsafe Actions4.3 MediumN/A0%Oct 22, 2026
CVE-2026-96388: Cross-Site Request Forgery (CSRF)5.4 MediumN/A0%Oct 22, 2026
CVE-2026-96387: Authentication Bypass Using an Alternate Path or Channel3.8 LowN/A0%Oct 22, 2026
CVE-2026-96386: Missing Authorization6.5 MediumN/A0%Oct 22, 2026
CVE-2026-96385: Authentication Bypass Using an Alternate Path or Channel6.5 MediumN/A0%Oct 22, 2026
CVE-2026-96384: Incorrect Authorization3.5 LowN/A0%Oct 22, 2026
CVE-2026-96382: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 22, 2026
CVE-2026-96380: Missing Authorization6.5 MediumN/A0%Oct 22, 2026
CVE-2026-96379: Improper Neutralization of Input During Web Page GenerationN/AN/A0%Oct 22, 2026
CVE-2026-96378: Improperly Controlled Modification of Dynamically-Determined Object Attributes4.3 MediumN/A0%Oct 22, 2026
CVE-2026-96377: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%Oct 22, 2026
CVE-2026-96376: Improper Neutralization of Special Elements used in an OS Command6.4 MediumN/A1%Oct 22, 2026
3351-3375 of 416436